john godley vulnerabilities

Products

• redirection plugin 1
• search unleashed 1
• Tidy Up 1

Latest john godley CVEs

Newest publication first

1. CVE-2024-56015 WordPress Tidy Up Plugin <= 1.3 - CSRF to Reflected Cross-Site Scripting vulnerability

   Published 2024-12-16

   High·CVSS 7.1 EPSS 0.20%

   Cross-Site Request Forgery (CSRF) vulnerability in John Godley Tidy Up allows Reflected XSS.This issue affects Tidy Up: from n/a through 1.3.

2. CVE-2011-4562 Redirection <= 2.2.9 - Cross-Site Scripting

   Published 2011-11-28

   Medium·CVSS 4.3 EPSS 2.4%

   Multiple cross-site scripting (XSS) vulnerabilities in (1) view/admin/log_item.php and (2) view/admin/log_item_details.php in the Redirection plugin 2.2.9 for WordPress allow remote attackers to inject arbitrary web script or HTML via the Referer HTTP header in a request to a pos...

3. CVE-2008-0837 Search Unleashed <= 0.2.10 - Cross-Site Scripting

   Published 2008-02-20

   Medium·CVSS 4.3 EPSS 2.0%

   Cross-site scripting (XSS) vulnerability in the log feature in the John Godley Search Unleashed 0.2.10 plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter, which is not properly handled when the administrator views the log file.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.